www.mairetecnimont.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:00:6c:81:40:6d:f1:72:6d:19:7f:0a:38:91:37:0b:f7:ee was issued on by Let's Encrypt.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.mairetecnimont.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:00:6c:81:40:6d:f1:72:6d:19:7f:0a:38:91:37:0b:f7:ee
Serial Number (int): 261481085531905070414789759689766690617326
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7a:63:c9:db:0a:a5:4e:c7:d3:05:90:a2:06:1c:ad:77:83:90:fa:39
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d3:1f:a3:2c:c7:e7:92:aa:0c:5e:63:f8:95:55:c9:a2:c7:e3:fc:ca
Fingerprint (sha256): 16:fc:13:b6:e8:53:b8:d2:e9:38:2d:c1:6f:5d:af:cc:4d:76:d1:c7:81:f2:dc:e7:58:ee:81:a5:22:6f:7a:c3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.mairetecnimont.com

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.mairetecnimont.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

docweb.tecnimont.it
docwebkt.tecnimont.it
hrp.tecnimont.it
marportal.mairetecnimont.com
metspmat.mairetecnimont.com
oammet.mairetecnimont.com
prometeo.mairetecnimont.it
reporting.mairetecnimont.com
www.mairetecnimont.com

Other certificates including the domain name mairetecnimont.com

(limited to 100 certificates)
segnalazioni.pensplan.com
www.mairetecnimont.com
whistleblowing.mairetecnimont.com
segnalazioni.pensplan.com
whistleblowing.giustizia.it
whistleblowing.giustizia.it
whistleblowing.mairetecnimont.com
www.mairetecnimont.com
whistleblowing.giustizia.it
segnalazioni.pensplan.com
www.mairetecnimont.com
www.mairetecnimont.com
www.tecnimont.it
www.mairetecnimont.com
whistleblowing.giustizia.it
www.mairetecnimont.com
www.mairetecnimont.com
hybrid.mairetecnimont.com
whistleblowing.giustizia.it
segnalazioni.pensplan.com
www.tecnimont.it
whistleblowing.giustizia.it
*.mairetecnimont.com
www.tecnimont.it
www.mairetecnimont.com
www.mairetecnimont.com
www.tecnimont.it
whistleblowing.giustizia.it
performance-commitment.mairetecnimont.com
whistleblowing.mairetecnimont.com
hybrid.mairetecnimont.com
whistleblowing.giustizia.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
www.tecnimont.it
segnalazioni.pensplan.com
anywhere.mairetecnimont.com
whistleblowing.giustizia.it
whistleblowing.giustizia.it
segnalazioni.pensplan.com
marportal.mairetecnimont.com
segnalazioni.pensplan.com
sts.mairetecnimont.com
whistleblowing.giustizia.it
whistleblowing.giustizia.it
sts.qual.mairetecnimont.com
whistleblowing.giustizia.it
wifiportal.mairetecnimont.com
www.tecnimont.it
whistleblowing.giustizia.it
www.tecnimont.it
www.mairetecnimont.com
www.mairetecnimont.com
hybrid.mairetecnimont.com
whistleblowing.giustizia.it
www.tecnimont.it
www.mairetecnimont.com
segnalazioni.pensplan.com
segnalazioni.pensplan.com
*.mairetecnimont.com
whistleblowing.giustizia.it
segnalazioni.pensplan.com
www.tecnimont.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
segnalazioni.pensplan.com
whistleblowing.giustizia.it
vdi.mairetecnimont.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
www.tecnimont.it
whistleblowing.giustizia.it
www.tecnimont.it
hybrid.mairetecnimont.com
hybrid.mairetecnimont.com
whistleblowing.giustizia.it
whistleblowing.giustizia.it
anywhere.mairetecnimont.com
whistleblowing.giustizia.it
www.mairetecnimont.com
metportal.mairetecnimont.it
*.mairetecnimont.com
*.mairetecnimont.com
whistleblowing.giustizia.it
www.mairetecnimont.com
*.mairetecnimont.com
www.mairetecnimont.com
hybrid.mairetecnimont.com
segnalazioni.pensplan.com
whistleblowing.giustizia.it
www.mairetecnimont.com
whistleblowing.giustizia.it
whistleblowing.giustizia.it
whistleblowing.mairetecnimont.com
www.mairetecnimont.com
segnalazioni.pensplan.com
whistleblowing.giustizia.it

Certificate

The complete raw certificate details for www.mairetecnimont.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx18I8SxUr1pb0/OzE22r
y46t09qqtSuxD2LzwtxuZS10zfuY01zNab49QJngZoL0cKmM7xRsW9THPIULwzK9
n8i0rOw86CJiAW0K8tlhPyXS8dxj53EgbRksvb3fvxcvZU1YEkOPGtYcLln4GyyX
3MS8S69pe/SZCBgAFYSnRfNF/6tfhAJYWvqgt+uhw/To8GoGJwGWcypRJIp6/a6z
ocFqCTSjHGjUrm24bgrzBWp7Qd3RlqHZrR6NtLQ6TKvCt6rhU7o6eh0I1xkhpyBC
f5CSy8VC7Khb28iqWkwK/NQM+2+UbSIdZchxMnhAuA8/MrCa1wJeiZ4XVRg93m++
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 261481085531905070414789759689766690617326
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-11 07:47:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-10 07:47:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.mairetecnimont.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25168286158859305398538979304076809962167529386512737167183643419352016322215790149719109901761906495245628298821607791136125164774390915787873274739861833118397725746076195236543101797123415312655632025509167147314178448002067046459265400310424668684303819416268481449192740084784733540903413585832214851798072431471215810085334545190910648252573921164139186798582665254392287847775606557798967435944420394599451217886147832570305278803506732799879937378070795204585432956847266317568607858430016826786149037551582411331351998283816051312592283069023896855821637272326966946400015222225758174570480176994407003700779
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7a63c9db0aa54ec7d30590a2061cad778390fa39
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (233 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docweb.tecnimont.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docwebkt.tecnimont.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrp.tecnimont.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marportal.mairetecnimont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metspmat.mairetecnimont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oammet.mairetecnimont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prometeo.mairetecnimont.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reporting.mairetecnimont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mairetecnimont.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d1f8125300000040300483046022100b14e17fc23a8d371c0bbb6342092e979a94a92abde9244a83e8ca6f07225051a0221009a1ae6b309308999d81862bdfd4b7ab38a91af2aff554ec43e4c3617225e2850007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d1f81254c0000040300483046022100e1ca32653b6cb153ea8e4e5bcfb46431af839e588faf438457e491b1780fe1930221008a375ff40bc4f183c9b784468708d1e19afbce8e175bb880957fd4a7645b3fcd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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